Terms of Service

Template draft — have counsel review before reliance. Not legal advice. Product: Citadel Exchange · Language: English · Last updated: 2026-08-01

1. Agreement

By accessing or using Citadel Exchange (the “Service”), you agree to these Terms. If you use the Service on behalf of an organization, you represent that you have authority to bind that organization.

2. The Service

Citadel Exchange provides end-to-end encrypted rooms for exchanging messages and files between authorized participants. The operator does not hold plaintext content keys for room data and cannot decrypt room contents in the ordinary course of operation.

3. Accounts and eligibility

You must provide accurate registration information, safeguard credentials and recovery materials, and promptly revoke access for people who should no longer use your organization’s tenant. You are responsible for activity under your accounts.

4. Acceptable use

You must comply with the operator’s Acceptable Use Policy. You may not attempt to bypass access controls, disrupt the Service, probe other tenants’ data, or use the Service for unlawful content.

5. Customer content

You retain rights to content you submit. You grant the operator a limited license to host, transmit, and process ciphertext and metadata as needed to provide the Service. Room plaintext is encrypted on client devices; the operator does not claim a license to read that plaintext.

6. Subscriptions and billing

Paid plans are billed through Stripe according to the plan you select. Fees are non-refundable except where required by law or expressly stated. You authorize us and Stripe to charge your payment method for recurring fees until cancelled via the Customer Portal or as otherwise provided.

7. Confidentiality and security

Each party will protect the other’s confidential information. You acknowledge that zero-knowledge design means lost recovery material may make content unrecoverable, and that a compromised end-user device is outside the operator’s control.

8. Availability and support

We aim for high availability but do not guarantee uninterrupted Service. Status information is published at /status. Support channels are described in your order form or pilot agreement.

9. Disclaimers

Except as expressly agreed in writing, the Service is provided “as is.” We disclaim implied warranties of merchantability, fitness for a particular purpose, and non-infringement to the fullest extent permitted by law.

10. Limitation of liability

To the fullest extent permitted by law, the operator’s aggregate liability arising out of the Service is limited to fees paid by you for the Service in the twelve (12) months before the claim. We are not liable for indirect, incidental, special, or consequential damages, or for loss of encrypted content where keys were lost or devices compromised.

11. Indemnity

You will indemnify the operator against claims arising from your content, unlawful use, or breach of these Terms, except to the extent caused by our willful misconduct.

12. Suspension and termination

We may suspend or terminate access for material breach, legal risk, or non- payment. You may stop using the Service at any time; data retention and erasure follow the Privacy Notice and DPA.

13. Governing law

Specify governing law and venue with counsel before launch (placeholder: laws of the operator’s principal place of business, excluding conflict rules).

14. Changes

We may update these Terms with notice via the Service or email. Continued use after the effective date constitutes acceptance, except where mandatory law requires affirmative consent.

15. Contact

Security: see /.well-known/security.txt. Legal notices: use the address designated in your order form or privacy contact once designated.